[Created by: generate-chains.py]

Certificate chain where the leaf certificate asserts the keyCertSign key
usage, however does not have CA=true in the basic constraints extension to
indicate it is a CA.

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:e0:65:d2:8a:72:7c:60:7d:f8:7e:88:6d:f0:a6:80:23:e1:38:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Intermediate
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Target
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:d5:97:4d:ce:b9:89:7b:00:4f:e4:1f:f6:b0:1d:
                    26:7d:c5:42:70:21:40:3a:a6:f9:07:5b:11:c6:fb:
                    0f:8e:79:46:78:ad:34:71:46:b4:fa:96:75:06:c8:
                    3e:c7:e9:1a:ae:f0:47:7f:4b:53:4a:f2:46:83:89:
                    92:b0:11:11:0c:04:7c:33:e1:4b:7e:b5:b5:b2:54:
                    a7:28:64:31:7b:e2:5c:4a:00:30:3f:8c:21:e0:61:
                    f6:15:e8:20:03:bf:ce:d3:b4:ec:6e:27:88:fb:a9:
                    b0:9a:73:79:26:46:55:a3:05:ac:25:ba:6f:24:3c:
                    17:7d:17:6c:25:ad:14:68:0b:fd:a6:d6:5f:5a:9a:
                    4a:9d:6d:86:e5:77:b9:50:9c:40:2b:40:af:1d:92:
                    4e:22:7a:c1:eb:57:17:16:4d:fa:12:e3:8c:25:8e:
                    8d:4b:74:4f:3e:67:cd:84:2a:63:46:43:3c:45:7f:
                    ad:bc:dd:5c:00:46:7e:25:36:43:d9:98:15:a1:f4:
                    f6:29:5d:54:9d:20:b8:b6:e1:4c:e3:f1:3c:91:47:
                    9d:eb:d7:f8:a2:f1:c5:f8:bc:7b:bf:bd:40:38:39:
                    01:3b:98:33:12:d9:de:c6:f9:eb:4b:e3:82:8e:98:
                    4b:28:1b:cd:ba:22:d5:b3:02:12:fc:40:86:ec:3e:
                    e7:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                1B:6F:D1:A8:67:1C:5F:A0:86:1B:FF:7B:E0:F4:72:33:CF:7C:F0:26
            X509v3 Authority Key Identifier: 
                keyid:B2:C0:C2:33:FD:8F:F5:37:4B:52:85:82:DD:31:5D:CE:A2:99:71:D0

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Intermediate.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Intermediate.crl

            X509v3 Key Usage: critical
                Digital Signature, Key Encipherment, Certificate Sign
            X509v3 Extended Key Usage: 
                TLS Web Server Authentication, TLS Web Client Authentication
    Signature Algorithm: sha256WithRSAEncryption
         5e:d5:2c:0f:bd:dc:c2:8e:c5:4c:00:0c:9e:a6:47:68:49:fb:
         14:46:7c:d2:6f:89:20:40:7b:1f:8b:30:e6:10:ce:5a:e7:7e:
         f1:d8:85:f5:bb:53:37:1e:93:c5:d7:97:fd:ce:1a:e1:4a:f7:
         fc:a8:fb:c0:5a:48:d9:cb:e1:3a:c5:71:d9:05:23:9e:01:9b:
         3d:a2:08:ca:e6:5f:0c:80:98:c9:b9:66:48:45:5f:b2:cb:8d:
         b6:73:89:ca:53:3b:0b:29:dc:0b:a1:14:fe:32:53:b6:9e:62:
         8b:ee:86:df:86:37:86:8d:84:0f:d9:48:c3:1f:33:08:99:2a:
         e1:da:2d:a0:b1:b9:47:70:68:1c:f3:15:a3:ac:b8:25:79:fe:
         e9:d0:ea:99:69:47:16:03:65:47:7f:ac:a1:a5:f3:2f:ea:d3:
         89:c6:ea:a9:8a:6e:c0:64:8d:81:5e:3d:f2:48:52:4f:ba:2f:
         78:29:3e:95:55:d4:78:6a:9a:96:a5:0f:05:71:b7:88:d4:15:
         13:0f:ef:d7:c3:9d:29:c7:40:09:7d:2b:93:ca:9f:2a:d0:6c:
         0d:5f:b8:8a:a4:bc:47:aa:c7:87:50:97:27:19:d0:58:0d:3a:
         81:38:63:60:f7:95:21:d5:b2:f9:97:d3:54:a7:53:47:13:bb:
         d7:99:82:01
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1e:f6:e0:d5:64:b5:71:7d:eb:f5:6d:bf:03:da:71:a6:d9:eb:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Intermediate
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:c6:14:bf:96:32:0d:cf:bb:58:2a:b4:3c:97:e5:
                    6c:22:92:ff:d3:14:e2:b9:0b:c9:fe:0d:09:d0:c6:
                    b5:48:ed:e0:2a:25:04:2e:16:08:6b:55:da:d1:f3:
                    b1:c1:1a:49:85:33:f4:bb:7c:d6:38:45:c8:af:4d:
                    d4:a9:43:a7:56:cf:9c:40:a5:2b:b8:13:7f:ee:6b:
                    fe:98:3b:ed:74:2a:5e:c7:9f:7c:e0:73:6c:a7:c4:
                    d8:f1:e3:55:79:6c:02:7c:b4:e8:3f:1a:93:57:62:
                    3a:86:5b:24:db:70:f2:fd:94:91:95:6b:68:72:73:
                    31:44:a5:36:32:e6:77:37:bb:e1:cb:6d:b5:aa:20:
                    3a:02:7e:ff:44:6d:79:e4:7d:e6:d3:72:92:e9:59:
                    92:57:ff:be:e8:e2:d9:84:47:f8:a9:f6:11:ee:cf:
                    5b:7f:92:d8:19:44:7f:96:40:52:19:09:80:af:2f:
                    36:65:14:9a:fe:ef:aa:aa:c9:00:fb:ac:d3:87:59:
                    14:ab:69:52:4c:4f:87:0f:74:49:ab:c5:f2:fb:73:
                    23:c0:91:c9:93:82:6f:28:8d:23:f9:2d:f3:92:cc:
                    f5:68:20:86:0d:37:35:d7:46:da:dd:4a:fc:92:3b:
                    32:a2:67:ba:f5:b3:49:13:76:e9:5e:78:a0:86:3e:
                    de:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                B2:C0:C2:33:FD:8F:F5:37:4B:52:85:82:DD:31:5D:CE:A2:99:71:D0
            X509v3 Authority Key Identifier: 
                keyid:24:DB:B4:DE:3E:3F:AA:1D:B0:57:7A:1D:7C:CD:86:E9:6B:D0:15:6F

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         9f:c6:60:37:6a:32:41:1a:c2:23:f0:c7:9a:4f:c7:76:e7:0e:
         5c:3f:c0:3a:f9:89:43:f6:79:46:a4:32:aa:02:04:b1:8c:5c:
         eb:7a:af:84:ae:a5:f9:65:8a:dc:cf:97:f1:d6:d7:d7:a4:bd:
         e7:67:a9:bb:e9:18:16:a2:c1:6e:08:e3:3a:ac:2a:65:cf:e6:
         cb:9f:a8:7d:1c:3e:1f:c4:e8:0a:96:09:89:f6:72:8c:da:6a:
         88:3d:9d:d2:ba:80:ef:03:ac:ec:33:01:5b:d1:28:50:7d:a4:
         d7:67:75:69:10:dd:dc:09:c6:7c:b1:07:96:c1:4f:5c:d9:cb:
         18:1b:0d:ab:96:16:cf:b3:79:ae:39:86:5d:e2:94:11:7a:49:
         67:e8:62:cd:53:b8:a3:5d:2a:b5:17:93:4b:19:39:75:47:f4:
         ea:f5:51:72:65:a2:43:17:29:57:8c:5a:06:c8:d2:a6:16:9a:
         ce:c6:f9:89:5c:84:b7:b1:91:92:bd:a9:df:c2:2e:5d:70:ce:
         6d:b7:84:67:e5:ce:df:3f:5f:61:93:0e:f5:ad:9b:08:b1:f6:
         b6:d8:15:a8:b6:1e:c1:88:ec:7c:80:68:31:4d:79:13:0c:1d:
         30:46:cd:db:ab:4c:dd:ec:6a:b3:33:58:0b:0e:1d:b8:fb:7d:
         97:e3:5b:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:1e:f6:e0:d5:64:b5:71:7d:eb:f5:6d:bf:03:da:71:a6:d9:eb:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=Root
        Validity
            Not Before: Mar 10 12:00:00 2018 GMT
            Not After : Jan  1 12:00:00 2021 GMT
        Subject: CN=Root
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                Public-Key: (2048 bit)
                Modulus:
                    00:e4:4e:96:f6:de:02:05:e7:16:80:fa:ed:b1:3c:
                    f3:19:ea:7b:d2:fe:ed:93:b7:09:37:7d:c1:98:9b:
                    65:a9:84:09:72:cd:e5:d8:da:21:44:c2:2e:92:95:
                    12:fe:35:0c:66:34:ad:f3:4f:c5:2f:d0:2e:57:41:
                    1c:3b:ce:c9:51:17:05:eb:06:f7:4f:fb:6e:27:9d:
                    06:d8:10:87:f4:97:5f:0f:9d:5d:d7:2b:d3:3b:21:
                    5b:5a:8f:20:e0:97:16:7b:15:39:d6:3f:ff:1d:06:
                    53:74:62:78:68:5b:ed:c2:05:e7:86:8b:1a:63:3a:
                    d3:e4:a9:25:8f:0e:92:13:df:39:d6:31:82:bf:bd:
                    ef:d4:21:9d:0e:7f:c9:90:ef:1d:c5:f3:c4:00:1e:
                    4a:03:61:f4:5e:cf:e9:58:e5:12:49:37:31:49:89:
                    54:d8:59:40:78:eb:e2:3f:75:9c:a5:ff:1c:33:b8:
                    6c:26:26:5a:8f:28:12:1f:4e:81:e5:a6:aa:dd:c6:
                    d9:c9:94:6a:15:3c:9e:7a:59:29:92:cb:7a:f5:67:
                    c4:d4:dd:4c:c5:6e:fb:b3:c2:5a:9d:f1:0b:35:17:
                    92:b6:85:dc:fd:45:c5:3f:13:f3:cd:fc:bc:b6:59:
                    c0:17:0b:ce:b3:e1:47:d1:2f:34:74:a4:5c:ba:a9:
                    cf:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                24:DB:B4:DE:3E:3F:AA:1D:B0:57:7A:1D:7C:CD:86:E9:6B:D0:15:6F
            X509v3 Authority Key Identifier: 
                keyid:24:DB:B4:DE:3E:3F:AA:1D:B0:57:7A:1D:7C:CD:86:E9:6B:D0:15:6F

            Authority Information Access: 
                CA Issuers - URI:http://url-for-aia/Root.cer

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:http://url-for-crl/Root.crl

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
    Signature Algorithm: sha256WithRSAEncryption
         69:6d:e6:97:c4:6d:a6:f2:93:c4:45:cf:1c:e5:f8:3d:f5:55:
         e4:a9:dc:fe:e4:a5:dc:47:24:9c:05:1e:69:d8:0a:cb:3e:c3:
         58:6c:c9:d0:c0:fc:62:8b:04:5c:8a:96:a0:fa:44:31:6c:c7:
         8e:91:de:54:70:18:06:a8:f4:cf:b8:f7:2c:33:d1:06:41:cc:
         28:4b:94:76:44:3e:48:e2:dd:52:f5:1c:cc:46:02:83:f4:09:
         56:16:51:d6:ce:8d:73:12:b2:ab:06:43:dc:0d:3c:12:c5:5a:
         7d:94:de:34:2e:f5:da:47:bb:db:6a:1c:cc:23:e4:61:23:57:
         f6:cb:93:f2:0c:56:29:50:fb:dc:ce:97:8e:9d:c4:4d:6e:8a:
         86:c4:d4:5c:ca:52:21:26:12:17:fd:3b:87:31:9a:85:37:c2:
         e5:b3:7f:a8:de:c6:4a:78:1a:e2:55:fe:f0:06:2d:45:59:9f:
         10:b6:3d:6e:2d:55:df:42:a7:85:83:b6:53:e9:62:02:d3:9b:
         dd:e1:cc:ec:a4:76:14:02:59:1f:39:30:3c:2b:10:72:4c:cc:
         f8:62:bb:be:2d:2c:d3:5b:6d:9a:d7:b5:45:77:1c:b5:2e:04:
         c0:dc:52:2e:1f:6b:65:cc:3d:03:a1:f0:8d:7d:da:62:49:0a:
         f6:74:18:dd
-----BEGIN CERTIFICATE-----
MIIDeDCCAmCgAwIBAgIUAx724NVktXF96/VtvwPacabZ6yUwDQYJKoZIhvcNAQEL
BQAwDzENMAsGA1UEAwwEUm9vdDAeFw0xODAzMTAxMjAwMDBaFw0yMTAxMDExMjAw
MDBaMA8xDTALBgNVBAMMBFJvb3QwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
AoIBAQDkTpb23gIF5xaA+u2xPPMZ6nvS/u2Ttwk3fcGYm2WphAlyzeXY2iFEwi6S
lRL+NQxmNK3zT8Uv0C5XQRw7zslRFwXrBvdP+24nnQbYEIf0l18PnV3XK9M7IVta
jyDglxZ7FTnWP/8dBlN0YnhoW+3CBeeGixpjOtPkqSWPDpIT3znWMYK/ve/UIZ0O
f8mQ7x3F88QAHkoDYfRez+lY5RJJNzFJiVTYWUB46+I/dZyl/xwzuGwmJlqPKBIf
ToHlpqrdxtnJlGoVPJ56WSmSy3r1Z8TU3UzFbvuzwlqd8Qs1F5K2hdz9RcU/E/PN
/Ly2WcAXC86z4UfRLzR0pFy6qc8NAgMBAAGjgcswgcgwHQYDVR0OBBYEFCTbtN4+
P6odsFd6HXzNhulr0BVvMB8GA1UdIwQYMBaAFCTbtN4+P6odsFd6HXzNhulr0BVv
MDcGCCsGAQUFBwEBBCswKTAnBggrBgEFBQcwAoYbaHR0cDovL3VybC1mb3ItYWlh
L1Jvb3QuY2VyMCwGA1UdHwQlMCMwIaAfoB2GG2h0dHA6Ly91cmwtZm9yLWNybC9S
b290LmNybDAOBgNVHQ8BAf8EBAMCAQYwDwYDVR0TAQH/BAUwAwEB/zANBgkqhkiG
9w0BAQsFAAOCAQEAaW3ml8RtpvKTxEXPHOX4PfVV5Knc/uSl3EcknAUeadgKyz7D
WGzJ0MD8YosEXIqWoPpEMWzHjpHeVHAYBqj0z7j3LDPRBkHMKEuUdkQ+SOLdUvUc
zEYCg/QJVhZR1s6NcxKyqwZD3A08EsVafZTeNC712ke722oczCPkYSNX9suT8gxW
KVD73M6Xjp3ETW6KhsTUXMpSISYSF/07hzGahTfC5bN/qN7GSnga4lX+8AYtRVmf
ELY9bi1V30KnhYO2U+liAtOb3eHM7KR2FAJZHzkwPCsQckzM+GK7vi0s01ttmte1
RXcctS4EwNxSLh9rZcw9A6HwjX3aYkkK9nQY3Q==
-----END CERTIFICATE-----